信息网络安全

信息网络安全 ›› 2015, Vol. 15 ›› Issue (4): 5-12.doi: 10.3969/j.issn.1671-1122.2015.04.002

• • 上一篇    下一篇

Windows操作系统的安全风险可控性分析

卿斯汉1,2,3(), 程伟1, 杜超1   

  1. 1. 北京大学软件与微电子学院,北京 102600
    2. 中国科学院软件研究所,北京 100190
    3. 中国科学院信息工程研究所信息安全国家重点实验室,北京 100093
  • 收稿日期:2015-03-12 出版日期:2015-04-10 发布日期:2018-07-16
  • 作者简介:

    作者简介： 卿斯汉（1939-）,男,湖南,研究员,主要研究方向：安全协议、可信计算、云安全、操作系统安全等;程伟（1988-）,男,山东,硕士研究生,主要研究方向：系统与网络安全、云计算与安全;杜超（1990-）,男,山东,硕士研究生,主要研究方向：系统与网络安全、云计算与安全。

  • 基金资助:
    国家自然科学基金[61170282]

Analysis of Security Risk Controllability for Windows OS

Si-han QING1,2,3(), Wei CHENG1, Chao DU1   

  1. 1. School of Software and Microelectronics, Peking University, Beijing 102600, China
    2. Institute of Software, Chinese Academy of Sciences, Beijing 100190, China
    3. State Key Laboratory of Information Security , Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China
  • Received:2015-03-12 Online:2015-04-10 Published:2018-07-16

RichHTML

2

PDF (PC)

193

摘要：

随着互联网的普及与快速发展,信息系统的安全问题日益突出,导致安全风险明显增加。信息系统、网络及网络应用受到越来越多的攻击,黑客攻击也日趋先进、成熟和多样化。Windows作为世界范围内的主流操作系统,自然受到黑客更多的注目与青睐。面对黑客日益先进和不断改进的攻击,微软不断推出具有新安全特色的新版本Windows。其中,可控性的改进对降低安全风险十分重要。可控性的改进不但需要保证系统的安全风险可控,还要在一定程度上使用户也能控制安全风险。文章分析和讨论了Windows 8引入了哪些新的安全机制,改进了哪些已有的安全措施,对提高系统的安全风险可控性有哪些影响和作用。

关键词: Windows, 可控性, 安全特色

Abstract:

With the popularization and rapid development of internet, the problems concerning information security have become increasingly prominent, causing increasing security risks. Information systems, networks, and network applications have been attacked frequently, and the attacking methods have become increasingly sophisticated, mature, and diverse. As the most popular OS worldwide, Windows system naturally has received more attacks than others. Facing the more advanced attacks, Microsoft constantly launches new version of Windows with new security features. Among these security features, the improvement of controllability is important to reduce security risks. Not only the security risk controllability of an information system should be assured, but also the users can control the security risks to a certain extent. This paper analyzes and discusses what new security mechanisms have been introduced based on Windows 8, and what existing security solutions have been improved in this new version, and lastly how these new measures impact on the security risk controllability.

Key words: Windows, controllability, security features

中图分类号: